$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: 04Vyk+MV6UZUMv+SFMazTj+X8K0uwkpC4Mmr/EJ/QVs= Subject key identifier: BF:4D:82:DE:A7:C2:D4:44:6B:AB:5F:CD:76:6D:39:22:94:44:34:D7 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 082E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 14A0 Signing time: Sat 18 Oct 2025 19:08:34 +0000 Manifest this update: Sat 18 Oct 2025 19:08:34 +0000 Manifest next update: Sat 25 Oct 2025 19:08:34 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: NX8xiPkEXck4OCNu869jhas1pKKYVdpZ9sk78dImJeM=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: Wy656K9y8HRrMZ3s/WXbZct5wLSLzkShWRKdtdLgnAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Oct 18 19:08:34 2025 GMT Not After : Oct 25 19:08:34 2025 GMT Subject: CN=68f3e5b2-a691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:d2:05:17:c4:9a:79:9e:a4:db:f3:b2:85: 5b:af:77:46:6f:9b:f3:b9:39:a8:34:49:cb:8d:6d: 40:6e:0b:36:6b:00:97:3a:12:1f:97:2c:2d:88:95: 0d:0c:fe:7a:a6:c4:a7:60:70:0c:c9:87:4f:f1:47: de:f0:dc:9a:50:c0:ad:9d:32:b3:7c:d5:13:a7:a3: ac:d5:5b:09:e4:3f:9f:ad:1b:07:c0:29:a2:39:5f: f6:12:1b:e9:02:d6:a8:cd:c2:30:b6:75:7b:ae:32: e7:29:6b:c6:02:c3:11:a2:0c:01:5b:af:9a:ba:9b: e3:35:bf:ea:8d:cd:c3:52:a1:32:7b:d3:18:f0:9e: a2:aa:9a:2a:5c:f5:6b:b0:19:f4:49:23:c9:ef:23: f9:3c:08:85:b8:6e:79:e4:3f:4d:ef:1b:b2:30:43: 6e:ab:2b:d4:84:4e:7b:02:89:53:97:a2:a3:b3:7f: 91:be:db:db:a5:6b:db:95:0a:2e:5d:d5:0d:5d:87: 25:f7:92:00:7f:31:73:a8:4f:4d:a0:00:a4:00:04: b2:1b:a1:e0:63:7c:c6:63:d6:0c:09:23:94:37:e6: 63:54:c9:54:3b:10:d7:2e:67:24:5c:38:55:5d:aa: b0:41:78:76:d4:11:8c:2e:2f:20:d7:e3:0e:4c:20: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4D:82:DE:A7:C2:D4:44:6B:AB:5F:CD:76:6D:39:22:94:44:34:D7 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:21:58:fe:a5:f1:66:f7:94:66:78:c5:fc:61:f8:e0:1b: 40:7a:b4:2c:c7:c4:ec:3f:73:51:62:48:d0:d5:86:11:0d:ee: c2:30:5a:86:71:29:63:51:e3:10:a7:6f:be:c2:c1:1e:53:fc: a2:bc:f4:ea:53:95:30:5d:91:96:44:98:36:73:e2:e7:b8:1b: 83:a2:a6:f8:e5:37:41:d0:b3:e6:5a:37:3b:b2:d6:7b:6d:b4: 16:d1:d9:71:db:72:e4:4b:24:11:48:21:4e:b7:5f:5d:03:28: 3a:e9:fb:0b:71:3d:22:b0:71:55:61:ee:a2:30:3b:69:14:e0: bf:69:17:80:63:9d:e4:57:27:27:45:35:b7:7a:8f:14:87:bc: 8a:e8:ea:0a:4c:47:04:05:0a:d4:63:01:38:50:56:87:4b:f5: 3a:a8:97:b8:16:80:40:17:5a:f8:10:c8:1a:02:37:c8:9b:ee: 6f:21:12:55:4a:ca:e1:3e:5a:3c:22:c7:0f:25:6b:5e:b5:dd: 4c:82:b3:d4:70:d4:a0:d5:81:bb:92:f6:61:7d:3c:69:fd:d9: 92:95:1c:43:05:0c:02:bc:31:c0:67:74:e6:e1:52:b2:12:3b: 71:7c:38:6d:a2:08:41:13:51:0c:11:54:34:65:e3:ae:0b:63: 03:8d:e9:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUxMDE4MTkwODM0WhcNMjUxMDI1MTkwODM0WjAYMRYwFAYD VQQDEw02OGYzZTViMi1hNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2rSBRfEmnmepNvzsoVbr3dGb5vzuTmoNEnLjW1Abgs2awCXOhIflywtiJUN DP56psSnYHAMyYdP8Ufe8NyaUMCtnTKzfNUTp6Os1VsJ5D+frRsHwCmiOV/2Ehvp AtaozcIwtnV7rjLnKWvGAsMRogwBW6+aupvjNb/qjc3DUqEye9MY8J6iqpoqXPVr sBn0SSPJ7yP5PAiFuG555D9N7xuyMENuqyvUhE57AolTl6Kjs3+RvtvbpWvblQou XdUNXYcl95IAfzFzqE9NoACkAASyG6HgY3zGY9YMCSOUN+ZjVMlUOxDXLmckXDhV XaqwQXh21BGMLi8g1+MOTCAgPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9Ngt6n wtREa6tfzXZtOSKURDTXMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmKCFY/qXxZveUZnjF/GH44BtAerQsx8TsP3NRYkjQ1YYRDe7CMFqG cSljUeMQp2++wsEeU/yivPTqU5UwXZGWRJg2c+LnuBuDoqb45TdB0LPmWjc7stZ7 bbQW0dlx23LkSyQRSCFOt19dAyg66fsLcT0isHFVYe6iMDtpFOC/aReAY53kVycn RTW3eo8Uh7yK6OoKTEcEBQrUYwE4UFaHS/U6qJe4FoBAF1r4EMgaAjfIm+5vIRJV SsrhPlo8IscPJWtetd1MgrPUcNSg1YG7kvZhfTxp/dmSlRxDBQwCvDHAZ3Tm4VKy EjtxfDhtoghBE1EMEVQ0ZeOuC2MDjemO -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:56 2025 by rpki-client